Cloud Engineer

Groundswell•McLean, VA

9d•$88,177 - $171,637•Hybrid

About The Position

Groundswell is seeking an experienced Cloud Engineer to build and operate secure, resilient cloud capabilities for a mission-focused platform that brings together authoritative data, services, and users in a controlled environment. This role combines hands-on cloud engineering with platform integration, automation, and operational discipline. You will help turn complex mission needs into dependable cloud services that are secure by design, observable in production, and maintainable over time.

Requirements

Bachelor’s degree in Computer Science , Software Engineering, Cloud Engineering, or a related technical discipline with a minimum of 4 years of relevant experience .
Demonstrated experience designing, deploying, and operating scalable, highly available , and fault-tolerant systems in AWS using services such as EC2, S3, RDS, Lambda, IAM, CloudFormation, and CloudWatch.
Hands-on experience with Kubernetes and container ecosystems, including Docker or OCI images, deployments, services, ingress, configuration, and troubleshooting.
Experience building CI/CD pipelines with tools such as Jenkins, GitLab CI/CD, Github Actions, or AWS CodePipeline , including automated validation and promotion across environments.
Experience with Infrastructure as Code using Terraform, AWS CloudFormation, or comparable tooling, with an emphasis on repeatability and controlled change.
Working knowledge of AWS networking, including VPCs, subnets, routing, security groups, network access controls, load balancing, and private connectivity patterns.
Experience implementing cloud security controls for identity and access management, encryption, secrets, logging, monitoring, and auditability in a restricted or compliance-oriented environment.
Ability to diagnose distributed-system failures using logs, metrics, traces, and other operational signals, and to communicate findings clearly to technical and non-technical stakeholders.
Self-starter who can work independently while collaborating effectively across multidisciplinary teams and customer organizations.
Must be a U.S. Citizen per contract requirements.
Must be able to obtain and maintain a Public Trust Clearance in accordance with contract requirements.

Nice To Haves

Experience designing or supporting data integration workflows and services that exchange JSON, XML, or other structured formats.
Experience with AWS services such as EKS, ECR, API Gateway, Step Functions, EventBridge , SQS, SNS, Secrets Manager, KMS, Kafka or MSK, and Systems Manager.
Familiarity with GitOps , policy as code, automated security scanning, software supply-chain controls, and immutable or repeatable deployment practices.
Experience supporting platform operations in environments with segmented networks, strict access controls, limited connectivity, or formal change-management processes.
Ability to translate mission or operational needs into technical designs, implementation plans, and measurable acceptance criteria.
Extra consideration given to those with C3.ai experience.
Active Public Trust Clearance.
Preference given to candidates local to the Washington, DC metro area
AWS certification, such as Solutions Architect, DevOps Engineer, or Security Specialty, is preferred.

Responsibilities

Design, implement, test, and deploy AWS cloud infrastructure and application services that support secure, scalable, and highly available mission platforms.
Build and operate containerized services using Kubernetes and related cloud-native technologies, including deployment patterns, configuration management, service discovery, and controlled upgrades.
Develop repeatable Infrastructure as Code and CI/CD workflows that promote consistent environments, auditable changes, automated testing, and reliable releases.
Integrate data and application services across APIs, message or event flows, and structured data sources while preserving data integrity, provenance, access controls, and appropriate handling metadata.
Apply cloud security practices across identity, networking, secrets, encryption, logging, vulnerability management, and least-privilege access in accordance with customer and program requirements.
Instrument services and infrastructure for health, performance, and mission-relevant operational insight; troubleshoot issues across distributed systems and drive root-cause resolution.
Partner with architects, software engineers, data specialists, security teams, and customer stakeholders to clarify needs, identify technical gaps, and deliver solutions that can evolve with the mission.
Produce clear architecture notes, runbooks, deployment guidance, and other maintainable documentation so the platform can be operated and extended by the broader team.